Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
File:                     3130332e38302e38302e302f32322d3232203d3e203634333030.roa (raw, json)
Hash identifier:          rMOWT+Ye0Pphv7CiiFxcHimLa3gi4O0yl02xPpOb4zM=
Subject key identifier:   A3:5C:48:D0:86:B5:98:50:07:24:C3:F4:E7:52:70:ED:FF:7C:B8:83
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       0109D11A21A8456EB3146D4478CACC7609765F9B
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
Signing time:             Mon 18 Sep 2023 03:00:46 +0000
ROA not before:           Mon 18 Sep 2023 02:55:46 +0000
ROA not after:            Mon 16 Sep 2024 03:00:46 +0000
asID:                     64300
IP address blocks:        103.80.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 16:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:d1:1a:21:a8:45:6e:b3:14:6d:44:78:ca:cc:76:09:76:5f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Sep 18 02:55:46 2023 GMT
            Not After : Sep 16 03:00:46 2024 GMT
        Subject: CN=A35C48D086B598500724C3F4E75270EDFF7CB883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:b7:60:28:4e:84:aa:39:8c:4f:91:86:d1:
                    c5:ea:93:36:1a:c7:8a:e4:5f:6d:37:37:19:e4:d2:
                    57:28:53:8a:b9:4c:6a:db:53:d1:48:e5:54:c7:83:
                    0a:2d:27:71:0b:c4:8c:53:49:49:d3:32:2f:ab:c0:
                    6c:c6:cb:5f:d4:32:66:a6:a7:94:4d:14:86:3c:13:
                    35:b5:8e:a1:38:1b:28:b0:ba:4d:f2:1a:3f:3b:97:
                    e1:64:19:27:0c:be:4c:21:d4:bb:d8:0f:88:7c:ad:
                    81:2d:1e:ec:4b:6d:b0:c7:d6:0c:81:5e:f2:9f:96:
                    39:62:5f:5f:a3:5f:bf:fe:e6:d4:aa:b8:4c:4b:be:
                    9c:00:f2:fb:df:98:00:ce:73:b3:b9:f2:72:b1:0b:
                    21:7e:d4:33:be:03:0f:2e:31:53:e6:c4:98:14:ee:
                    ae:63:6c:60:53:18:ef:f9:46:4b:23:3c:3b:99:39:
                    36:62:2d:43:85:46:94:b7:5d:03:00:9c:9b:a2:d3:
                    63:2e:af:5c:a4:2e:5d:19:a3:bb:93:47:25:c2:b9:
                    9d:3c:bc:9d:ad:4b:5c:33:32:e6:7f:d1:fd:59:db:
                    52:06:80:28:3d:fe:05:19:77:3c:51:72:93:1d:1e:
                    76:c1:bf:d6:eb:52:98:77:22:4b:c0:de:be:33:df:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:48:D0:86:B5:98:50:07:24:C3:F4:E7:52:70:ED:FF:7C:B8:83
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:da:f6:02:25:bc:cd:06:51:cc:56:3e:fd:04:62:d1:81:b3:
         ae:73:c5:b6:06:14:6f:43:98:b0:56:c1:f8:06:66:02:35:d5:
         ec:a4:6c:3f:79:2e:03:9b:90:ef:4d:5d:bd:1c:30:52:ff:13:
         ec:e3:21:0b:6c:ca:60:f4:af:fc:9c:a2:6b:a5:07:9f:bf:b8:
         ef:88:35:1e:38:41:2c:20:01:5c:bf:8d:ed:44:16:29:90:42:
         9e:ce:32:68:0c:b6:1b:a1:f4:4e:7b:10:82:bc:9c:a2:68:70:
         9b:fc:e7:2c:ef:e4:cd:f0:fa:1d:5d:2b:97:d3:4a:1c:db:71:
         e7:61:fc:94:2a:ae:09:3c:f6:34:b5:7e:1e:a7:dd:54:c2:4d:
         40:9a:bb:a3:cd:bd:57:47:2d:44:d3:98:b5:a2:ef:7d:9a:2c:
         6a:19:92:b1:17:41:24:93:7c:97:2a:e4:b2:59:9f:92:2b:8c:
         05:f1:7f:68:b8:8f:a7:68:1d:b1:4b:e6:97:1b:6e:1d:81:b4:
         c3:15:ba:7b:ab:b4:41:d1:1d:59:04:20:68:b5:19:47:d2:e8:
         6a:4c:d9:62:d5:62:64:99:1d:17:d1:60:b4:cf:41:19:37:3e:
         da:31:a9:18:a2:6a:6a:35:20:0a:6f:c1:c5:6a:a6:b0:83:47:
         67:6a:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:42 2024 by rpki-client on console-ams.rpki-client.org